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Amendments to the Claims: 

The following listing of claims replaces all prior versions, and listings, of claims in the present 
application. Please amend claims 1 and 7 as follows: 

Listing of the Claims: 

1 . (currently amended) A method for effecting controlled access to a privileged account 
on a computer system comprising: 

logging into an account with a us e r id and an account nam e ; 

receiving a login into an account with a user id and an account name: 

determining whether the account name is in a list of privileged account names and 
allowing access to the account if the account name is not in the privileged account list; 

determining whether the user id is in a list of user ids having permission to access 
privileged accounts and allowing access to the account if the user id is in the list of user ids 
having permission to access privileged accounts; 

prompting for a reason for accessing the account: 

recording a reason for accessing the account; 

notifying a manager of the privileged account of the login; 

recording keystrokes in a log file while logged into the account; 

terminating the login; 

and notifying the manager of the privileged account of the login termination. 

2. (original) A method in accordance with claim 1 further comprising: determining 
whether the log file is tampered with; and terminating the login in response to determining that 
the log file is tampered with. 

3. (original) A method in accordance with claim 1 further comprising: denying write 
permission to the log file after the step of terminating the login. 

4. (original) A method in accordance with claim 1 further comprising: recording 
keystrokes while accessing the account in a duplicate log file. 
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5. (original) A method in accordance with claim 4 fiirther comprising: determining 
whether the log file is tamped with; terminating the login and transmitting the duplicate file in 
response to determining that the log file is tampered with. 

6. (original) A method in accordance with claim 1 further comprising: transmitting the 
log file to the account manager. 

7. (currently amended) A method in accordance with claim 1 fiirther comprising: 
e nt e ring receiving a password in order to access the privileged account; determining whether the 
password associated with the user id matches the entered password; and permitting access only if 
the password associated with the user id matches the entered password. 

8. (original) A method in accordance with claim 1 fiirther comprising: notifying the 
manager of the privileged account if the login is not successful. 

9. (original) A method in accordance with claim 1 further comprising: compressing the 
log file after terminating the login. 

10. (original) A method in accordance with claim 1 further comprising: recording 
keystrokes while accessing the account in a duplicate log file; deleting the duplicate log file 
responsive to a determination that the log file has not been tampered with. 

1 1 . (new) A method for effecting controlled access to a privileged account on a 
computer system running a Unix-like operating system, comprising: 

receiving a login into an account with a user id and an account name; 

receiving a switchuser command with an account name as an argument; 

determining whether the account name is in a list of privileged account names and 
allowing access to the accoimt if the account name is not in the privileged account list; 

determining whether the user id is in a list of user ids having permission to access 
privileged accounts and allowing access to the account if the user id is in the list of user ids 
having permission to access privileged accounts; 

prompting for a reason for accessing the account; 

recording a reason for accessing the account; 

notifying a manager of the privileged account of the login; 
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recording keystrokes in a log file while logged into the account; 
terminating the login; 

and notifying the manager of the privileged account of the login termination. 

12. (new) A method for effecting controlled access to a privileged account on a 
computer system running a Unix-like operating system, comprising: 

receiving a login into an account with a user id and an account name; 

receiving a switchuser command with an account name as an argument; 

determining whether the account name is in a list of privileged account names and 
allowing access to the account if the account name is not in the privileged account list; 

determining whether the user id is in a list of user ids having permission to access 
privileged accounts and allowing access to the account if the user id is in the list of user ids 
having permission to access privileged accounts; 

prompting for a reason for accessing the accotmt; 

recording a reason for accessing the account; 

determining whether the password associated with the user id matches the entered 
password; 

permitting access only if the password associated with the user id matches the entered 
password. 

notifying a manager of the privileged account of the login; 
recording keystrokes in a log file while logged into the account; 
determining whether the log file is tampered with; 

terminating the login in response to determining that the log file is tampered with; 
denying write permission to the log file after the step of terminating the login in response 
to determining that the log file is tampered with; 

notifying the manager of the privileged account if the login is not successful via an email; 
recording keystrokes while accessing the accotmt in a duplicate log file; 
determining whether the duplicate log file is tamped with; 

deleting the duplicate log file responsive to a determination that the log file has not been 
tampered with; 

terminating the login and transmitting the duplicate file in response to determining that 
the log file is tampered with; 
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terminating the login; 

compressing the log file after terminating the login; and 

notifying the manager of the privileged account of the login termination via an email. 
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